Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
File:                     DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft (raw, json)
Hash identifier:          Wyu/sIXKp7FGDQy86lra76DDvD1SSSSxupabQ/g6M6U=
Subject key identifier:   F4:7C:35:08:D9:6D:08:B0:B9:82:14:1D:31:28:33:02:3E:74:73:B3
Authority key identifier: 0C:DE:0B:7E:67:8F:FE:A9:E3:AE:05:79:FE:E1:84:77:61:2E:4F:E9
Certificate issuer:       /CN=F3639A71AR/serialNumber=0CDE0B7E678FFEA9E3AE0579FEE18477612E4FE9
Certificate serial:       01E5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
Manifest number:          01E4
Signing time:             Sun 20 Apr 2025 04:14:12 +0000
Manifest this update:     Sun 20 Apr 2025 04:14:11 +0000
Manifest next update:     Tue 22 Apr 2025 04:14:11 +0000
Files and hashes:         1: DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl (hash: zgE/CPGSG1pszB1ZK2VBcBM5HHeaX3oVxE4H9Ekmyzs=)
                          2: CE2F2690AD5311EE8E27B3B1775412E6.roa (hash: 8IJ5uu88BzDrvRLts60KNKjSTABo8XS/43EbjaMJPDo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
                          rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Apr 2025 04:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 485 (0x1e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639A71AR, serialNumber=0CDE0B7E678FFEA9E3AE0579FEE18477612E4FE9
        Validity
            Not Before: Apr 20 04:14:11 2025 GMT
            Not After : Apr 22 04:14:11 2025 GMT
        Subject: CN=68047494-fb8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f1:23:8d:df:c6:54:6f:32:91:59:ba:fa:5b:
                    8f:d9:49:4d:74:a2:19:34:03:68:35:13:db:1d:4e:
                    a9:6c:57:3a:95:51:ef:3f:e1:fb:04:fc:a0:8a:c9:
                    15:c8:5c:54:49:93:d7:94:82:3a:3f:ea:8d:40:40:
                    3c:42:88:ad:f3:e3:d7:1d:df:64:02:cd:2e:b0:3b:
                    eb:80:4b:d2:38:80:fe:92:1f:46:dc:23:64:b4:61:
                    3e:33:1a:22:ad:99:06:b6:9c:12:61:2c:9b:13:fe:
                    d4:cc:4e:93:b2:78:ef:31:23:84:04:e8:31:e6:3b:
                    cc:5d:eb:c0:c2:5d:0a:1b:85:57:f2:8a:c3:c4:e4:
                    10:e8:8d:f3:5c:cb:34:3a:22:98:32:25:78:69:c2:
                    e4:71:b6:32:38:34:27:4f:22:0c:a2:5f:c3:66:ba:
                    fa:54:cd:fa:30:45:05:4a:b6:1e:15:eb:c1:59:f0:
                    63:ad:b8:04:21:a6:37:a7:4d:ec:91:b9:6a:dd:38:
                    fb:b2:b1:4f:01:e5:db:a8:f5:2f:66:d6:01:f7:b7:
                    a1:1d:74:0a:98:a9:a1:45:c4:b1:04:85:f8:31:56:
                    f2:b5:b3:fd:45:15:51:d7:3f:c5:23:e5:ec:78:a8:
                    dc:06:bb:3f:57:7a:cd:d9:51:b9:01:44:86:bd:fb:
                    03:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7C:35:08:D9:6D:08:B0:B9:82:14:1D:31:28:33:02:3E:74:73:B3
            X509v3 Authority Key Identifier:
                keyid:0C:DE:0B:7E:67:8F:FE:A9:E3:AE:05:79:FE:E1:84:77:61:2E:4F:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:12:ce:61:18:e9:91:9e:b6:87:7b:c4:b6:15:19:29:49:7e:
         44:21:98:ea:f4:e3:26:e7:64:ba:55:36:30:5c:c9:ac:61:84:
         45:78:13:6b:46:5b:ec:f2:04:06:fc:12:d8:67:4f:fe:14:c5:
         84:4b:80:54:73:86:b2:9e:99:00:7c:75:03:f3:ac:ce:41:86:
         33:b3:ab:6b:26:c6:0a:8c:61:6d:71:9e:62:bb:c7:ca:d7:b4:
         97:80:9e:f4:c3:23:23:7c:2f:74:08:aa:c5:68:4b:10:35:3e:
         85:7b:6e:91:9a:9f:da:84:46:30:1c:8b:fb:57:8d:dd:b3:20:
         f1:28:6a:a7:ef:d4:d3:5d:fe:12:94:78:90:3a:22:7b:aa:cc:
         1f:48:ab:3f:77:a6:d4:f6:e7:eb:41:6b:cf:ec:c2:1f:e6:55:
         e9:94:e7:3d:96:36:65:e5:99:de:9e:89:9a:df:e9:54:f7:75:
         80:8e:bc:93:86:16:67:f1:bc:5f:64:9b:1d:d7:f0:30:aa:38:
         ac:ca:11:b5:84:87:b8:e4:0d:c7:80:19:97:ab:27:08:f1:a7:
         11:ec:39:c7:be:c3:69:01:c3:ea:df:0d:48:12:c0:26:92:bc:
         06:fa:84:cf:89:4d:7c:29:9e:83:1c:29:cb:c7:15:45:3f:79:
         cc:1d:ad:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:29:46 2025 by rpki-client